Box.net integration with shib 2.x

[Cantor, Scott]

On 6/11/15, 7:18 PM, "Robert Roll" <Robert.Roll at utah.edu> wrote:


>
> After reading this thread I was wondering if indeed we were encrypting 
>our
>assertions. The default configuration for encryptassertions is 
>"conditional" which
>means they are encrypted if either the SP key is marked as use encryption 
>or
>actually "unmarked".

It means they're encrypted or the IdP request fails with an error on the 
IdP end, so there's no ambiguity based on conditional, at least in V2. V3 
has an "optional" switch that makes it less unforgiving, but in V2 you 
either have it "never" or you're encrypting or you're failing.

-- Scott